[Music] hey everyone it's Justin thank you for watching and welcome to my house Justin's house in this video I'm reviewing or giving an overview of the new security Center Labs I've got it up on the screen behind me you can see it here I stumbled across this last week when looking at changes in the servicenow App Store and this caught me off guard I didn't realize it was a servicenow app and I'll call your attention to this little statement right here security Center Labs is intend to replace the instant security Center app in this future subject to Future roadmap decisions so it looks like they are using the Innovation labs to position a new security Center product so if you're not familiar with the instant security Center I've got it up here I'll go ahead and pull it up in my web browser this is what it looked like this is what we had access to we were monitoring some configurations and security settings within the instant security Center so this is what eventually will be replaced supposedly by this new app called security Center labs now this article actually links to uh or no I'm sorry this app actually links to an article on the knowledge Community or a servicenow community around what it is please install it send this guys Stefano's and feedback and then some basic descriptions of what's going on not many people have looked at this yet it's about two weeks old so I'm surprised that no one's noticed it I hadn't heard of it or noticed it before but it is new I did get it installed this is what it looks like behind me I've run a couple of scans I'm still not seeing some of the comparison things that I want to see even though I've kind of Hit the refresh score buttons and all that but you can see I've got that next experience look and feel so my one critique or criticism right now and again this is just being fair and whatever I've just clicked on it is if I move into another tab within this application I get a whole page refresh which is kind of annoying so everything's got to be updated and even when I move between like sub tabs over here on the left hand side I want to look at all my hardening settings I get a complete screen Refresh on looking at some of this stuff so that's critique number one it's just UI kind of stuff but you can see on this hardening security settings that um there's a lot more in my mind security related stuff going on so let's take a look at what I wanted to show around this scanning sweeps I was doing just some high level comparison between the instant Security Suite definition and the new security lab Suites definition so I'll go ahead and click on The Suite so you can see what those look like so you're going to get two sets of definitions of things to scan for you can see the date diff on these is about two years so I won't be too critical about what's in there but if we look at the old instant security Center definitions essentially there were 65 different checks that were happening and a lot of them were table checks like the permissions people having access what's downloadable so it seemed to me I mean it was also helpful stuff you can see I got about four pages of checks that are going on here's antivirus pins on mobile captcha slas only triggered for their domain system the domain stuff so interesting stuff that was going on in that one if I go out to the new suite of definition we go from 65 checks to 113 checks in the new security Center definitions now I don't know if there's any um I think I just clicked on the wrong one I don't know if there's any overlap between the two there might be possibly I didn't do a thorough examination of them I did run the Suites I executed it so I could see what was different or if I had any glaring obviously security incidents issues this is my PDI by the way it's not a production and here's the 113 and the first thing that just jumped out at me is that there's these script only checks as compared to all those table checks that we were seeing earlier so now I'm seeing stuff around unsanitized HTML Legacy jQuery soap restrict request tricks to security Escape jelly and I've got 113 so almost double what we were seeing in the instant security Center definitions so for that reason alone I would go ahead and download this app if you look in the App Store it is available and licensed on all servicenow instance including developer portal instances so if you're if you're in a PDI like I am just go to your system app don't go to the stuff available from the store search for Securities in our Labs it was there I was able to install it so you don't need to use the store to actually do this however it does have the usual uh hit the wrong button there the usual Innovation lab disclaimer that they're not supported by a service now and they don't carry any warranties so obviously that would make you hesitant about putting this in action but if you did put this in sub production or in your PDI to get to know it there's some pretty decent stuff here that I think might be important for you to check so this is the new instant security Center let me leave one more thing I thought was really interesting so I've got a metric actually two more things I got a metrics tab which is using looks like some PA and some scores to kind of show me how many total users active users and active users people not logged in people that need their password reset so a little bit of what we are seeing on this instant security Center Page around some high level metrics for that kind of stuff so there's some feature parity there what was really neat I think was this training tab if you're someone who is experienced with service now you know sometimes you just have to know where to go to find stuff whether that's the community whether that's the documentation site whether that's burying yourself in some script includes to find out how something works I was really impressed with this bringing everything into one sense place so I've got the release notes I've got foundational guides around security best practices instant security Cloud security in-depth guides around data encryption and email spam scoring and filtering Regional and specific or industry specific things so look I've got New Zealand Europe European Union UK US HIPAA UK public sector I thought that was really neat and if you look above my head I've got a bunch of documentation links to product documentation the portals themselves platform security features from auditing certificates domain Edge encryption all that kind of stuff so a nice new product that was released in the store it looks like two weeks ago security Center Labs is what you're looking for and uh supposedly this is going to replace instant security centers so as in this demo you could see it's got a little bit of a UI refresh it's got some uh some things that can be better but it seems pretty cool as I learn more about it I'll share that with you here on the channel I hope you found this video helpful if you did please like Please Subscribe or share it with somebody who you think is interested in making sure their servicenow instance is secure and until next time don't forget to always be learning [Music]